4509 matches found
curl:curl_fuzzer: Heap-buffer-overflow in Curl_sasl_decode_mech
Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=6136943799304192 Project: curl Fuzzing Engine: afl Fuzz Target: curlfuzzer Job Type: aflasancurl Platform Id: linux Crash Type: Heap-buffer-overflow READ 10 Crash Address: 0x60a0007c0232 Crash State:...
PT-2021-28002
Name of the Vulnerable Software and Affected Versions stb versions affected versions not specified Description The issue is related to a global buffer overflow read error. Technical details about the crash include the involvement of specific function names such as stbi jpeg decode block, stbi...
PT-2021-24313 · Gif2Apng +2 · Gif2Apng +2
Name of the Vulnerable Software and Affected Versions: gif2apng version 1.9 Description: A heap-based buffer overflow issue was found in the DecodeLZW function, allowing an attacker to write a large amount of arbitrary data outside the boundaries of a buffer. Recommendations: For gif2apng version...
gif2apng 缓冲区错误漏洞
gif2apng is a simple program that converts animations from GIF to APNG format. A security vulnerability exists in gif2apng, which stems from an issue found in gif2apng 1.9 where a heap-based buffer overflow vulnerability exists in the DecodeLZW function. An attacker could use this vulnerability t...
PT-2021-27984
Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description The issue is related to a heap buffer overflow read. Technical details about the crash include the Curl sasl decode mech and Curl sasl parse url auth option functions, as well as the pop3 parse...
curl:curl_fuzzer: Heap-buffer-overflow in Curl_sasl_decode_mech
Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=6071225397411840 Project: curl Fuzzing Engine: afl Fuzz Target: curlfuzzer Job Type: aflasancurl Platform Id: linux Crash Type: Heap-buffer-overflow READ 10 Crash Address: 0x6060021432b2 Crash State:...
PT-2021-27972
Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the Curl sasl decode mech and Curl sasl parse url auth option functions, as well as the pop3...
curl:curl_fuzzer: Heap-buffer-overflow in Curl_sasl_decode_mech
Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=6642157950205952 Project: curl Fuzzing Engine: afl Fuzz Target: curlfuzzer Job Type: aflasancurl Platform Id: linux Crash Type: Heap-buffer-overflow READ 10 Crash Address: 0x6030008f1892 Crash State:...
CVE-2021-28237
LibreDWG v0.12.3 was discovered to contain a heap-buffer overflow via decodepreR13...
PT-2021-17828
Name of the Vulnerable Software and Affected Versions: LibreDWG version 0.12.3 Description: The issue is related to a heap-buffer overflow that can occur via the decode preR13 function. This is a general information about the problem, and no specific details about the estimated number of...
Libredwg 缓冲区错误漏洞
Libredwg is a free C library from the Free Software Foundation, USA. It is used to read and write Dwg files. LibreDWG suffers from a buffer overflow vulnerability, which stems from the inclusion of a heap buffer overflow in decodepreR13. No detailed vulnerability details are currently available...
PT-2023-12472
Name of the Vulnerable Software and Affected Versions lldpd versions prior to 1.0.13 Description The issue arises when decoding SONMP packets in the sonmp decode function, allowing for an out-of-bounds heap read via short SONMP packets. Recommendations For versions prior to 1.0.13, update to...
DEBIAN-CVE-2021-21707
In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing functions, like simplexmlloadfile, URL-decode the filename passed to them. If that filename contains URL-encoded NUL character, this may cause the function to interpret this as the end of the...
CVE-2021-21707
In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing functions, like simplexmlloadfile, URL-decode the filename passed to them. If that filename contains URL-encoded NUL character, this may cause the function to interpret this as the end of the...
PT-2021-30790
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.5 Description The issue is related to an exposure in the nfsd4 decode bitmap function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...
PT-2021-26795
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.5 Description: The issue is related to an exposure in the nfsd4 decode bitmap function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior ...
wolfmqtt:wolfmqtt-fuzzer: Heap-buffer-overflow in MqttDecode_Props
Project: https://github.com/wolfSSL/wolfMQTT.git Detailed Report: https://oss-fuzz.com/testcase?key=4632913572921344 Project: wolfmqtt Fuzzing Engine: libFuzzer Fuzz Target: wolfmqtt-fuzzer Job Type: libfuzzerasani386wolfmqtt Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Addres...
PT-2021-27916
Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description The issue is related to a heap buffer overflow read. Technical details about the crash include the Curl sasl decode mech and Curl sasl parse url auth option functions, as well as the smtp parse...
curl:curl_fuzzer: Heap-buffer-overflow in Curl_sasl_decode_mech
Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=6358065000087552 Project: curl Fuzzing Engine: afl Fuzz Target: curlfuzzer Job Type: aflasancurl Platform Id: linux Crash Type: Heap-buffer-overflow READ 10 Crash Address: 0x60e00002bbff Crash State:...
njs:njs_process_script_fuzzer: Use-of-uninitialized-value in njs_utf8_decode
Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=6355911919140864 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...